Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/le6TbJ6WNv7M1g51dNOOkLmU95E.roa
File: le6TbJ6WNv7M1g51dNOOkLmU95E.roa (raw, json)
Hash identifier: dX+Zhp1TTkqbL/uB+yKjLJqRLrlXnXUwLxoegZ5I0u0=
Subject key identifier: 95:EE:93:6C:9E:96:36:FE:CC:D6:0E:75:74:D3:8E:90:B9:94:F7:91
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018E2C5C9A52D2890DB218C9F65E8CD27B3C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/le6TbJ6WNv7M1g51dNOOkLmU95E.roa
Signing time: Mon 11 Mar 2024 07:14:10 +0000
ROA not before: Mon 11 Mar 2024 07:14:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8717
IP address blocks: 5.53.128.0/17 maxlen: 17
37.63.0.0/17 maxlen: 17
46.238.0.0/18 maxlen: 18
46.238.14.0/24 maxlen: 24
62.204.128.0/19 maxlen: 19
62.204.128.0/24 maxlen: 24
62.204.130.0/24 maxlen: 24
62.221.128.0/19 maxlen: 19
62.221.128.0/24 maxlen: 24
77.70.0.0/17 maxlen: 17
77.236.160.0/19 maxlen: 19
77.236.178.0/23 maxlen: 23
78.83.0.0/16 maxlen: 16
78.83.7.0/24 maxlen: 24
78.83.143.0/24 maxlen: 24
78.83.144.0/24 maxlen: 24
78.83.145.0/24 maxlen: 24
78.83.146.0/24 maxlen: 24
78.83.147.0/24 maxlen: 24
78.83.148.0/24 maxlen: 24
78.83.149.0/24 maxlen: 24
78.83.150.0/24 maxlen: 24
78.83.151.0/24 maxlen: 24
78.83.160.0/24 maxlen: 24
78.83.210.0/24 maxlen: 24
78.83.225.0/24 maxlen: 24
78.83.226.0/23 maxlen: 23
78.90.0.0/16 maxlen: 16
78.90.206.0/24 maxlen: 24
78.90.247.0/24 maxlen: 24
80.253.48.0/20 maxlen: 20
82.103.64.0/18 maxlen: 18
82.103.91.0/24 maxlen: 24
82.103.103.0/24 maxlen: 24
82.103.109.0/24 maxlen: 24
82.103.110.0/23 maxlen: 23
82.103.126.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
82.147.128.0/19 maxlen: 19
83.97.24.0/21 maxlen: 21
84.242.128.0/18 maxlen: 18
84.252.0.0/18 maxlen: 18
85.91.128.0/19 maxlen: 19
85.118.64.0/19 maxlen: 19
85.130.0.0/17 maxlen: 17
85.130.95.0/24 maxlen: 24
85.130.96.0/23 maxlen: 23
85.130.120.0/23 maxlen: 23
85.196.128.0/18 maxlen: 18
87.97.128.0/17 maxlen: 17
87.97.160.0/22 maxlen: 22
87.227.128.0/17 maxlen: 17
88.203.128.0/17 maxlen: 17
88.203.128.0/23 maxlen: 23
88.203.128.0/24 maxlen: 24
88.203.129.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
88.203.147.0/24 maxlen: 24
88.203.177.0/24 maxlen: 24
88.203.204.0/24 maxlen: 24
88.203.237.0/24 maxlen: 24
89.186.200.0/21 maxlen: 21
89.190.192.0/19 maxlen: 19
89.215.0.0/16 maxlen: 16
89.215.8.0/22 maxlen: 22
89.215.40.0/22 maxlen: 22
89.215.48.0/22 maxlen: 22
89.253.128.0/18 maxlen: 18
92.247.0.0/16 maxlen: 16
92.247.168.0/24 maxlen: 24
95.111.0.0/17 maxlen: 17
95.140.208.0/20 maxlen: 20
130.204.0.0/16 maxlen: 16
151.251.0.0/16 maxlen: 16
151.251.38.0/24 maxlen: 24
151.251.140.0/24 maxlen: 24
151.251.237.0/24 maxlen: 24
176.12.0.0/18 maxlen: 18
195.24.32.0/19 maxlen: 19
195.34.96.0/19 maxlen: 19
195.34.101.0/24 maxlen: 24
195.34.122.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
195.149.248.0/21 maxlen: 21
212.36.0.0/19 maxlen: 19
212.36.6.0/24 maxlen: 24
212.50.0.0/19 maxlen: 19
212.50.7.0/24 maxlen: 24
212.91.160.0/19 maxlen: 19
212.91.184.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
212.95.160.0/19 maxlen: 19
212.95.161.0/24 maxlen: 24
212.104.96.0/19 maxlen: 19
213.169.32.0/19 maxlen: 19
213.191.160.0/19 maxlen: 19
213.222.32.0/19 maxlen: 19
213.222.59.0/24 maxlen: 24
213.226.0.0/18 maxlen: 18
213.226.5.0/24 maxlen: 24
213.226.6.0/24 maxlen: 24
213.226.9.0/24 maxlen: 24
213.226.31.0/24 maxlen: 24
213.226.35.0/24 maxlen: 24
213.226.47.0/24 maxlen: 24
213.226.48.0/24 maxlen: 24
213.240.192.0/18 maxlen: 18
217.9.224.0/20 maxlen: 20
217.9.224.0/24 maxlen: 24
217.10.240.0/20 maxlen: 20
217.18.240.0/20 maxlen: 20
217.18.240.0/24 maxlen: 24
217.18.245.0/24 maxlen: 24
217.79.32.0/20 maxlen: 20
2a00:4800::/29 maxlen: 29
2a01:288::/32 maxlen: 32
2a01:288:400b::/48 maxlen: 48
2a01:288:400c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:5c:9a:52:d2:89:0d:b2:18:c9:f6:5e:8c:d2:7b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Mar 11 07:14:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95ee936c9e9636feccd60e7574d38e90b994f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:e2:e6:06:67:12:f2:4f:2f:5f:d8:b3:44:
9b:5d:96:29:bd:17:24:be:8e:d7:b5:c0:3a:7f:d8:
6d:30:c4:45:8a:e6:d2:0d:e1:7a:cd:84:1b:05:fe:
35:ea:05:cd:18:73:7e:7e:0d:5d:a0:de:49:d1:fb:
0b:a9:f2:5b:64:c4:7e:9c:0e:0b:7d:59:97:10:cb:
e8:95:02:a2:a0:61:16:f2:17:d7:ca:9d:81:52:72:
80:cc:c2:bf:90:7a:8b:e3:64:4a:17:f5:8d:06:e9:
ae:01:68:c7:d2:20:b9:4e:d7:c9:d6:0c:a3:b2:eb:
c7:ea:c0:e0:b3:18:96:f5:a5:81:f8:30:30:e8:a7:
03:69:9e:bc:a1:17:dd:fe:c2:0d:6c:58:f8:41:23:
39:ea:d6:ab:3e:85:4a:f6:92:70:b8:51:f0:5f:52:
8b:27:d5:45:ff:d5:d2:71:0d:86:3c:82:0e:26:fe:
6d:0e:f1:f7:fe:80:5e:f5:db:d3:b5:00:53:b9:f8:
6c:34:97:7e:bf:76:42:75:a8:29:f8:56:d0:4d:78:
e7:71:8b:51:46:b3:03:e3:c4:86:5b:77:26:3d:85:
9d:e1:9e:37:6f:fe:4a:b9:07:88:7b:5a:e9:6f:c2:
87:2e:b9:4a:19:30:47:3a:53:43:7a:b3:37:b0:f2:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:93:6C:9E:96:36:FE:CC:D6:0E:75:74:D3:8E:90:B9:94:F7:91
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/le6TbJ6WNv7M1g51dNOOkLmU95E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.128.0/17
37.63.0.0/17
46.238.0.0/18
62.204.128.0/19
62.221.128.0/19
77.70.0.0/17
77.236.160.0/19
78.83.0.0/16
78.90.0.0/16
80.253.48.0/20
82.103.64.0/18
82.147.128.0/19
83.97.24.0/21
84.242.128.0/18
84.252.0.0/18
85.91.128.0/19
85.118.64.0/19
85.130.0.0/17
85.196.128.0/18
87.97.128.0/17
87.227.128.0/17
88.203.128.0/17
89.186.200.0/21
89.190.192.0/19
89.215.0.0/16
89.253.128.0/18
92.247.0.0/16
95.111.0.0/17
95.140.208.0/20
130.204.0.0/16
151.251.0.0/16
176.12.0.0/18
195.24.32.0/19
195.34.96.0/19
195.149.248.0/21
212.36.0.0/19
212.50.0.0/19
212.91.160.0/19
212.95.160.0/19
212.104.96.0/19
213.169.32.0/19
213.191.160.0/19
213.222.32.0/19
213.226.0.0/18
213.240.192.0/18
217.9.224.0/20
217.10.240.0/20
217.18.240.0/20
217.79.32.0/20
IPv6:
2a00:4800::/29
2a01:288::/32
Signature Algorithm: sha256WithRSAEncryption
17:2d:fe:9f:6b:f4:61:7e:b7:8a:da:df:08:d2:20:96:ff:28:
62:82:94:45:aa:7d:db:82:dc:ec:97:88:23:86:0d:0b:8b:61:
23:ad:0d:79:24:78:14:89:a9:e5:0f:11:52:35:e3:e5:6f:b2:
4f:99:18:61:ad:f7:76:b3:1c:98:01:da:c8:86:44:86:52:b3:
25:9b:21:4b:ff:b4:46:f6:2f:8e:0c:b3:56:61:fe:17:3d:07:
0c:25:23:05:68:0a:99:af:6a:5f:5f:ca:ed:d2:d7:a7:dc:80:
ed:76:ad:e3:aa:03:1b:ca:c5:26:0f:48:6f:60:4f:4f:0b:a6:
d0:b8:37:a5:9f:c2:0c:2e:c0:02:64:4a:09:ca:b7:bf:a6:18:
28:8a:a3:2a:50:24:72:62:14:7c:80:97:0e:30:e0:ca:d8:97:
5f:9d:39:da:42:c6:5d:d4:95:8d:fc:3f:15:f2:b3:61:85:44:
4b:c7:78:7f:ad:77:44:c4:e3:1b:5f:a0:3f:13:74:f7:89:d4:
ab:cf:e6:44:67:5f:8c:cc:ef:42:f2:59:3c:e7:f3:e0:9e:49:
54:2d:b3:8f:43:80:06:5e:03:99:34:52:19:f2:f4:c1:5a:e6:
e7:36:52:b8:27:0f:4b:2e:49:3b:0c:2e:55:7c:43:7d:4f:05:
e6:75:25:67
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAY4sXJpS0okNshjJ9l6M0ns8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMzExMDcxNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWVlOTM2YzllOTYzNmZlY2NkNjBlNzU3NGQzOGU5MGI5OTRmNzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmPi5gZnEvJPL1/Ys0SbXZYpvRck
vo7XtcA6f9htMMRFiubSDeF6zYQbBf416gXNGHN+fg1doN5J0fsLqfJbZMR+nA4L
fVmXEMvolQKioGEW8hfXyp2BUnKAzMK/kHqL42RKF/WNBumuAWjH0iC5TtfJ1gyj
suvH6sDgsxiW9aWB+DAw6KcDaZ68oRfd/sINbFj4QSM56tarPoVK9pJwuFHwX1KL
J9VF/9XScQ2GPIIOJv5tDvH3/oBe9dvTtQBTufhsNJd+v3ZCdagp+FbQTXjncYtR
RrMD48SGW3cmPYWd4Z43b/5KuQeIe1rpb8KHLrlKGTBHOlNDerM3sPLN6wIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFJXuk2yeljb+zNYOdXTTjpC5lPeRMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvbGU2VGJKNldOdjdNMWc1MWROT09rTG1VOTVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCASgEAgABMIIB
IAMEBwU1gAMEByU/AAMEBi7uAAMEBT7MgAMEBT7dgAMEB01GAAMEBU3soAMDAE5T
AwMATloDBARQ/TADBAZSZ0ADBAVSk4ADBANTYRgDBAZU8oADBAZU/AADBAVVW4AD
BAVVdkADBAdVggADBAZVxIADBAdXYYADBAdX44ADBAdYy4ADBANZusgDBAVZvsAD
AwBZ1wMEBln9gAMDAFz3AwQHX28AAwQEX4zQAwMAgswDAwCX+wMEBrAMAAMEBcMY
IAMEBcMiYAMEA8OV+AMEBdQkAAMEBdQyAAMEBdRboAMEBdRfoAMEBdRoYAMEBdWp
IAMEBdW/oAMEBdXeIAMEBtXiAAMEBtXwwAMEBNkJ4AMEBNkK8AMEBNkS8AMEBNlP
IDAUBAIAAjAOAwUDKgBIAAMFACoBAogwDQYJKoZIhvcNAQELBQADggEBABct/p9r
9GF+t4ra3wjSIJb/KGKClEWqfduC3OyXiCOGDQuLYSOtDXkkeBSJqeUPEVI14+Vv
sk+ZGGGt93azHJgB2siGRIZSsyWbIUv/tEb2L44Ms1Zh/hc9BwwlIwVoCpmval9f
yu3S16fcgO12reOqAxvKxSYPSG9gT08LptC4N6WfwgwuwAJkSgnKt7+mGCiKoypQ
JHJiFHyAlw4w4MrYl1+dOdpCxl3UlY38PxXys2GFREvHeH+td0TE4xtfoD8TdPeJ
1KvP5kRnX4zM70LyWTzn8+CeSVQts49DgAZeA5k0Uhny9MFa5uc2UrgnD0suSTsM
LlV8Q31PBeZ1JWc=
-----END CERTIFICATE-----
Generated at Mon May 6 15:22:55 2024 by rpki-client on console-ams.rpki-client.org